begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.'+#13#10+'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(true);
end;
ClearQuarantine;
TerminateProcessByName('C:\Users\Сергей\AppData\Roaming\Adobe64x\postgre.exe');
QuarantineFile('C:\Users\Сергей\AppData\Roaming\Adobe64x\invis.vbs','');
QuarantineFile('C:\Users\Сергей\AppData\Roaming\Adobe64x\bat.exe','');
QuarantineFile('C:\ProgramData\svchost0\qpqpdndnn.exe','');
QuarantineFile('C:\Users\Сергей\AppData\Roaming\Adobe64x\postgre.exe','');
QuarantineFile('C:\Users\D899~1\AppData\Local\Temp\NEwBSDynDNS.exe','');
QuarantineFile('C:\Users\Сергей\AppData\Roaming\fifa14.exe','');
QuarantineFile('C:\Windows\system32\acovcnt.exe','');
QuarantineFile('C:\ProgramData\ProgramData - Ярлык.lnk','');
QuarantineFileF('C:\Users\Сергей\AppData\Roaming\Adobe64x', '*', true, ' ', 0, 0);
QuarantineFileF('C:\Users\Сергей\AppData\Roaming\Adobe86x', '*', true, ' ', 0, 0);
QuarantineFileF('C:\ProgramData\svchost0', '*', true, ' ', 0, 0);
DeleteFile('C:\Users\Сергей\AppData\Roaming\Adobe64x\bat.exe','32');
DeleteFile('C:\ProgramData\svchost0\qpqpdndnn.exe','32');
DeleteFile('C:\Users\Сергей\AppData\Roaming\Adobe64x\invis.vbs','32');
DeleteFile('C:\Users\Сергей\AppData\Roaming\Adobe64x\postgre.exe','32');
DeleteFile('C:\Users\D899~1\AppData\Local\Temp\NEwBSDynDNS.exe','32');
DeleteFile('C:\Users\Сергей\AppData\Roaming\fifa14.exe','32');
RegKeyDel('HKEY_LOCAL_MACHINE','software\microsoft\shared tools\msconfig\startupreg\svchost');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','AdobeUpdate');
RegKeyParamDel('HKEY_LOCAL_MACHINE','system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list','C:\Users\D899~1\AppData\Local\Temp\NEwBSDynDNS.exe');
DeleteFileMask('C:\Users\Сергей\AppData\Roaming\Adobe64x', '*', true, ' ');
DeleteFileMask('C:\Users\Сергей\AppData\Roaming\Adobe86x', '*', true, ' ');
DeleteFileMask('C:\ProgramData\svchost0', '*', true, ' ');
DeleteDirectory('C:\Users\Сергей\AppData\Roaming\Adobe64x');
DeleteDirectory('C:\Users\Сергей\AppData\Roaming\Adobe86x');
DeleteDirectory('C:\ProgramData\svchost0');
BC_ImportAll;
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
BC_Activate;
RebootWindows(true);
end.